Privacy Policy

When you visit our website, we process personal data (any information relating to an identified or identifiable natural person), provided that we are permitted to do so by law or that we have your consent. This Privacy Policy outlines how we process your personal data (hereinafter also referred to as “data processing”) and explains your rights as a data subject.

This policy governs the processing of personal data carried out through the use of the website, in compliance with Regulation (EU) 2016/679 (hereinafter, “GDPR”).

1. Identity and contacts of the Data Controller

Pursuant to art. 26 of the GDPR, the joint data controllers, as they have jointly determined the purposes and means of processing, are:

Arcturus srl , with registered office in Via Filippo Baldinucci, 60 – 20158 Milan (MI), administrative headquarters in Via Giovanni Coppo 1/C – 28060 Orfengo (No) and local unit in Via V. Monti n. 33 20158 Milan (MI), telephone 02/39310402, certified email arcturus@pec.sambonet.it email amministrazione@arcturusgroup.it (hereinafter “Arcturus” or “the Joint Controller”)
Sambonet Paderno Industrie SpA, with registered office in Via Giovanni Coppo, 1C – 28060 Orfengo (No), telephone 0321/1916711, certified email sambonet@pec.sambonet.it , email amministrazione@sambonet.it (hereinafter “Sambonet” or “the Joint Controller”)

The aforementioned companies are part of the Arcturus Group (hereinafter also simply “Group”), a corporate group active internationally in the production and distribution of tableware, kitchenware and living room items, both for the consumer market and for the Ho.Re.Ca. channel.

As joint controllers, Arcturus Srl and Sambonet Paderno Industrie SpA process personal data in collaboration with other brands of the Group, including: Sambonet, Paderno, Arthur Krupp, Rosenthal, Thomas, Hutschenreuther , Rosenthal meets Versace, Ercuis, Raynaud .

Since the Joint Controllers are established in Italy, no representative has been appointed pursuant to Article 27 of the GDPR.

2. Operation and hosting of our website

Our website is managed by an e-commerce service provider commissioned to perform data processing on our behalf (Article 28 GDPR). The site is hosted on servers located in the European Union.

3. Data processing activities

We process data as follows:

When you shop with us, we process your data that we need to enter into and perform a purchase agreement with you.
When you visit and navigate our website (“use of our website”), we process data from and about your device, some of which may be used to identify you as an individual.
When you contact us (“communicate”), for example by signing up for our newsletter, reviewing a product, or sending us a message.
When you consent to processing for profiling purposes , we process your data to analyze your preferences, consumer habits, browsing behavior, interactions with content, and purchase history, also to provide you with personalized offers, tailored content, and communications in line with your interests.

4. Contract: online purchase

Information on data processing

When you make a purchase on our online store, we will ask you to provide us with the following personal information:

First name;
Surname;
Billing/Delivery Address;
E-mail address;
Bank details and/or credit card information.

Scope and purpose of data processing

To process the payment;
To send you by email your confirmation of receipt and, if applicable, your order confirmation containing the information required by law and to send you by email updates on the delivery status of the goods you have ordered;
To send you the order invoice;
To deliver the goods you have ordered;
Assign any order cancellations, complaints, and other requests made after your order has been placed to you and your order and handle your requests and questions.

Duration of storage

If you choose not to open a customer account, your data will be blocked once the purchase contract has been fulfilled. This means that we will only process it to a limited extent. On the one hand, we are required to process it if you assert claims against us within the statutory limitation periods (usually three years), and we must link such claims to you as an individual and the respective business transaction. On the other hand, we are required by commercial and tax law to retain business records for up to ten years. These records may contain your data. We will delete your data as soon as these purposes have been fulfilled and these periods have expired.

If you have chosen to open a customer account, we will store your data in this account until you ask us to delete your customer account.

Legal bases of the processing

The data is processed because it is necessary for the performance of a contract (Article 6 GDPR).

In some cases (sending confirmations of receipt and providing information required by distance selling regulations), we also need to process data to comply with a legal obligation to which we are subject.

If you have opened a customer account , we also process your data on the basis of the consent you have given us (Article 6 GDPR).

5. Use of our website

Information on data processing

The following log data is automatically processed by us each time you visit our website and each time you download a file from one of our web pages:

host name of the computer/end device (IP address);
The date and time of access/download;
The page you are accessing;
The name of the downloaded file (if applicable);
The type of browser you are using;
The operating system on the end device;
The website you were visiting before coming to our site.

Scope and purpose of data processing

We process data for the following purposes:

To identify and protect against attacks on our website;
Make sure your internet browser supports cookies;
To prevent pop-ups from being shown to you more than once;
To view our website in your chosen language;
To view our website in the correct version for the shipping country you have selected.

Duration of storage

The data is stored for the following periods of time:

Log data: until the purpose is achieved, maximum three months;
Session cookies: until you leave our website;
Persistent cookies: one year.

Personal data processed and stored for the correct use of the website are processed and stored for a period no longer than 12 months from the date of collection.

Legal bases of the processing

We process data based on our interest in ensuring that our website is fully functional and secure. In our assessment, this legitimate interest is not overridden by the interests or fundamental rights and freedoms of data subjects (Article 6 GDPR). Upon request, we will be happy to provide you with further information on how we have balanced these interests..

6. Communication: newsletter

Information on data processing

If you have given specific consent, your personal data may also be processed by the Joint Controllers for profiling purposes, i.e., to analyze or predict aspects related to your preferences, personal interests, purchasing behavior, and use of the site.

Such treatment may include:

collection and analysis of data relating to navigation on the site (e.g. products viewed, time spent on a page),
interactions with emails and newsletters (e.g. openings, clicks),
order history and abandoned carts,
responses to surveys or reviews.

Scope and purpose of data processing

This data may be processed in aggregate or individual form to create user profiles aimed at personalising the shopping experience, promotional offers, and commercial communications, including automated communications.

Profiling may occur at the Group level, and therefore the data collected may also be shared and processed by other companies in the Arcturus group and its affiliated brands (e.g., Sambonet, Paderno, Arthur Krupp, Rosenthal, Thomas, etc.), in compliance with the principles of data minimization, proportionality, and security, and with appropriate tools to guarantee the data subject's rights.

Duration of storage

Data processed for profiling purposes will be retained for a maximum period of 24 months from collection, unless the interested party withdraws consent before this period.

Legal bases of the processing

The processing of data for profiling and personalized marketing purposes occurs exclusively on the basis of your consent (Article 6, paragraph 1, letter a) of the GDPR).

You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out before the withdrawal, by contacting us at the contact details indicated or via the appropriate link at the bottom of each communication.

7. Data Transfer and Recipients of personal data

The recipients of your data are the technical operator of our website and the hosting provider. If necessary for the performance of the contract, your data will also be shared with the companies we engage to accept and process your order. These companies are the following:

The courier responsible for shipping, delivering or collecting the goods;
The bank/building society responsible for processing the payment.

The transfer of personal data to the aforementioned entities, if established in a third country or international organization, is carried out based on an adequacy decision by the European Commission, which assesses whether the third country, territory, or one or more specific sectors of the third country or international organization ensure an adequate level of protection for the data subject's rights. In the absence of such a decision, the Data Controller – if deemed appropriate – reserves the right to enter into specific separate agreements requiring such entities to adopt adequate security and organizational measures, in order to provide appropriate guarantees regarding the data subject's rights.

8. Rights of the data subject

8.1 Right to object

The interested party has the right to object as indicated below:

Your consent to receive the newsletter remains in effect until you revoke it. You can do so at any time with future effect by contacting us using the details provided in Section 1 above or by clicking the unsubscribe link at the end of each newsletter. Alternatively, you can enter your email address in the newsletter text box on our website and click the "Unsubscribe" button.
You can withdraw your consent to the processing of your data for the purpose of managing your customer account at any time with future effect by contacting us using one of the contact methods indicated in Section 1 above. We will then delete your customer account.

The right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you pursuant to Article 6, paragraph 1, letters e) or f) of the GDPR, including profiling based on those provisions. The Data Controller will no longer process the personal data unless the Data Controller demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, including profiling to the extent that it is related to such direct marketing.

8.2 Other rights

The Data Controller also intends to inform the interested party of the existence of the following rights:

Right of access by the data subject: the data subject has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, to obtain access to the personal data and specific information, in accordance with art. 15 of the GDPR;
Right to rectification: The data subject has the right to obtain from the Data Controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement, in accordance with Art. 16 of the GDPR;
Right to erasure, including the right to withdraw consent: the data subject has the right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay, and the Data Controller has the obligation to erase personal data without undue delay, or to withdraw consent, if the grounds set forth in Article 17 of the GDPR apply. Regarding the right to withdraw consent, the data subject also has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Right to restriction of processing: The data subject has the right to obtain from the Data Controller restriction of processing when the conditions set out in Article 18 of the GDPR apply;
Right to data portability: The data subject has the right to receive the personal data concerning him or her, provided to the Data Controller, in a structured, commonly used, and machine-readable format and has the right to transmit such data to another controller without hindrance from the Controller, in the cases and under the conditions specified in Article 20 of the GDPR.

9. Accessibility to information to data subject

The information is accessible at http://arcturusgroup.it/it/privacy.html , as well as from the Data Controller. If expressly requested by the data subject, the information may also be provided verbally, provided the data subject's identity is verified, by telephone request to the Data Controller's address.

Last modified on October 21, 2025